mediasync[.]ink

The domain mediasync.ink was identified as a generic phishing threat targeting users with a fake YouTube copyright strike notification. The page title, "Yоutubе | Copyright strikes," indicates the impersonation of YouTube's legitimate copyright warning system, designed to trick users into believing their account is at risk. As of the latest check, the domain is offline, but it was actively used to harvest credentials or sensitive information from unsuspecting visitors.

This domain was registered on January 22, 2026, through NAMECHEAP INC, and resolved to the IP address 172.67.154.80. It appeared in one AlienVault OTX threat intelligence pulse and on one security blocklist. VirusTotal flagged it as malicious by 18 out of 95 security vendors, and Google Safe Browsing specifically flagged it for phishing. No SSL certificate was found, further indicating its illegitimate nature. The combination of these indicators, including its recent creation and high-risk designation, strongly suggests it was part of a targeted phishing campaign.

Although the domain is now offline, the threat it posed was significant due to its convincing impersonation of a trusted platform. Users who may have encountered this site before it was taken down should change any credentials entered immediately and enable two-factor authentication on their YouTube or Google accounts. PhishDestroy recommends always verifying URLs carefully, especially when receiving unexpected copyright or account suspension warnings. If you see similar domains, report them to Google Safe Browsing and your email provider to help protect others.